$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa File: 1c452224-3db4-3c25-8e3d-11a10373e9ab.roa (raw, json) Hash identifier: kjxOQfdLI9crB7rSexD/sF6aWKh4yBQ487LAuCRIEl0= Subject key identifier: DC:28:78:99:06:36:05:E4:50:E2:F8:BD:4B:43:34:07:23:BA:C0:03 Certificate issuer: /CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41 Certificate serial: 010D0C9F432858477EC10C35DD484C803935AC00 Authority key identifier: 71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2620:a5:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:0c:35:dd:48:4c:80:39:35:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=aa64d51f-a7b3-421e-b963-d421494f0d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:bb:27:a6:2d:b9:de:26:f5:5b:9e:e3:e3: 67:cc:82:8a:7d:bb:14:32:b6:ea:99:e5:7b:ff:8d: 20:12:23:ac:0c:50:17:2b:3e:04:fd:7a:59:20:e1: b0:fa:8a:d8:eb:8f:aa:de:90:cb:36:61:96:04:86: 56:96:f7:98:c5:38:4b:13:98:db:d5:52:aa:ab:4b: da:d4:ed:95:7d:02:2a:7c:7f:30:2d:f8:cc:fd:fa: f7:8e:1a:61:a4:9b:47:15:0e:91:25:ee:c3:dd:d8: c9:96:ed:1d:62:a0:94:8e:e9:60:5b:25:0c:72:00: 15:b1:1b:8e:a1:44:7e:d3:b5:8d:6e:78:43:7c:88: 0e:dd:12:fd:6f:30:43:72:39:1b:da:71:cc:a0:2c: c8:ba:08:c3:21:ad:8a:a4:70:35:d2:7e:e2:91:42: 1b:c6:3e:fd:23:4b:7a:50:84:77:ff:f5:1b:a0:14: dc:bc:d1:b4:9f:20:a0:a1:de:ab:a4:e6:f8:ce:82: 1d:6a:a4:a2:f9:a0:c0:c3:6a:04:9f:66:da:65:de: 3a:78:25:8f:16:df:9c:ca:60:77:f6:9b:94:7e:37: c2:9f:7b:11:ab:98:c0:87:d2:0c:d9:a3:cf:2b:1a: 20:f2:ea:08:50:35:31:67:a0:12:e5:55:e7:e7:27: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:78:99:06:36:05:E4:50:E2:F8:BD:4B:43:34:07:23:BA:C0:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl X509v3 Authority Key Identifier: keyid:71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer sbgp-ipAddrBlock: critical IPv6: 2620:a5:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:66:59:83:c1:69:01:da:80:6d:f7:16:09:04:cc:d4:fc:d4: 8b:5a:71:4d:86:57:90:d6:75:5e:55:04:b7:80:50:82:c8:b9: cc:77:99:85:b1:a9:67:d6:ed:60:83:5a:12:76:4c:93:d1:0d: 1f:4d:e1:ca:2a:50:24:b5:cb:65:c9:29:9e:2a:bb:5f:af:1f: 2d:55:2f:61:b6:52:9d:02:b0:90:69:6f:7c:e1:a7:b0:b8:d0: 69:a5:f1:ea:ec:6f:c1:af:f5:3a:a1:77:73:5d:14:00:b6:c1: 4e:6f:3d:23:95:16:37:e9:41:a0:56:87:00:22:42:70:8f:67: 62:03:31:d4:41:be:05:da:26:85:7d:e4:29:90:97:0b:08:c7: f4:b9:b8:a8:2b:98:91:64:0d:b7:47:8e:61:22:83:4e:a0:1b: 02:70:59:24:d7:a9:77:51:7d:4c:4e:52:b5:67:9c:4d:f1:33: 77:1a:7e:3f:e6:e5:ed:22:41:af:ec:84:94:66:6e:15:66:cb: 18:31:c0:dc:bc:2a:2e:6a:61:58:9d:c1:c4:f0:9e:12:d4:16: 05:cd:06:77:7a:9d:84:f0:d5:cb:b8:f8:c6:6d:cc:25:c9:ec: ab:10:79:6c:8d:99:3b:d0:8e:86:0f:55:77:30:0c:3d:09:55: 1e:1d:ee:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd+wQw13UhMgDk1rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkMmIxNjItZGI3Ny00NDIyLTlmODctYzBhZTBhYmU5 ZDQxMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk YWE2NGQ1MWYtYTdiMy00MjFlLWI5NjMtZDQyMTQ5NGYwZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vq7J6Ytud4m9Vue4+NnzIKKfbsUMrbqmeV7 /40gEiOsDFAXKz4E/XpZIOGw+orY64+q3pDLNmGWBIZWlveYxThLE5jb1VKqq0va 1O2VfQIqfH8wLfjM/fr3jhphpJtHFQ6RJe7D3djJlu0dYqCUjulgWyUMcgAVsRuO oUR+07WNbnhDfIgO3RL9bzBDcjkb2nHMoCzIugjDIa2KpHA10n7ikUIbxj79I0t6 UIR3//UboBTcvNG0nyCgod6rpOb4zoIdaqSi+aDAw2oEn2baZd46eCWPFt+cymB3 9puUfjfCn3sRq5jAh9IM2aPPKxog8uoIUDUxZ6AS5VXn5ycQYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNwoeJkGNgXkUOL4vUtDNAcjusADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGQy YjE2Mi1kYjc3LTQ0MjItOWY4Ny1jMGFlMGFiZTlkNDEvMWM0NTIyMjQtM2RiNC0z YzI1LThlM2QtMTFhMTAzNzNlOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRkMmIxNjItZGI3Ny00NDIyLTlm ODctYzBhZTBhYmU5ZDQxLzVkZDJiMTYyLWRiNzctNDQyMi05Zjg3LWMwYWUwYWJl OWQ0MS5jcmwwHwYDVR0jBBgwFoAUcShM8N2A0Ki50PAHPVtY/soIXCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGQyYjE2Mi1kYjc3LTQ0MjItOWY4Ny1jMGFl MGFiZTlkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAApWAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALFmWYPBaQHagG33FgkEzNT81ItacU2GV5DWdV5VBLeAUILIucx3 mYWxqWfW7WCDWhJ2TJPRDR9N4coqUCS1y2XJKZ4qu1+vHy1VL2G2Up0CsJBpb3zh p7C40Gml8ersb8Gv9Tqhd3NdFAC2wU5vPSOVFjfpQaBWhwAiQnCPZ2IDMdRBvgXa JoV95CmQlwsIx/S5uKgrmJFkDbdHjmEig06gGwJwWSTXqXdRfUxOUrVnnE3xM3ca fj/m5e0iQa/shJRmbhVmyxgxwNy8Ki5qYVidwcTwnhLUFgXNBnd6nYTw1cu4+MZt zCXJ7KsQeWyNmTvQjoYPVXcwDD0JVR4d7t4= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:50 2024 by rpki-client on console-ams.rpki-client.org